lm-sys vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20256
3. 20263

Newest CVEs

• CVE-2026-85695

  FastChat Unauthenticated Worker Registration SSRF and Model Spoofing

  lm-sys · FastChat

  Critical9.3
• CVE-2026-6608

  lm-sys fastchat Arena Side-by-Side View add_text control flow

  lm-sys · fastchat

  Medium6.9
• CVE-2026-6607

  lm-sys fastchat Worker API Endpoint api_generate resource consumption

  lm-sys · fastchat

  Medium6.9
• CVE-2025-3677

  lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserialization

  lm-sys · fastchat

  Medium4.8
• CVE-2024-10912

  Denial of Service in lm-sys/fastchat

  lm-sys · lm-sys/fastchat

  High7.5
• CVE-2024-12376

  Server Side Request Forgery in lm-sys/fastchat

  lm-sys · lm-sys/fastchat

  High7.5
• CVE-2024-10907

  Denial of Service (DoS) via Multipart Boundary in lm-sys/fastchat

  lm-sys · lm-sys/fastchat

  High7.5
• CVE-2024-11603

  Server-Side Request Forgery in lm-sys/fastchat

  lm-sys · lm-sys/fastchat

  High7.5
• CVE-2024-10908

  Open Redirect in lm-sys/fastchat

  lm-sys · lm-sys/fastchat

  Medium6.1
• CVE-2024-10044

  SSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchat

  lm-sys · lm-sys/fastchat

  Critical9.3